Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: 54EyLTU5l37ok0wytQa+FYGs0M9Wb2L5WvNt4Jvi/AE=
Subject key identifier: 4E:FC:C4:FB:93:65:AE:74:C0:D7:96:10:0E:2A:A2:C7:8F:79:71:8B
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 01976BBD071244E72C633B29148EBEADCEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 03D6
Signing time: Sat 14 Jun 2025 00:00:39 +0000
Manifest this update: Sat 14 Jun 2025 00:00:39 +0000
Manifest next update: Sun 15 Jun 2025 00:00:39 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: GRPZ96hwmaTFoC7t97t4S2rgYbtiEXXdeR26MMJ+V5g=)
2: zlH1YpMBnNZnNtFhgB3H0QDkGsY.roa (hash: YxbEBWdcoPz8a52GzX2VTy8310RPqgqc10/H2kW+jig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:07:12:44:e7:2c:63:3b:29:14:8e:be:ad:ce:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Jun 14 00:00:39 2025 GMT
Not After : Jun 15 00:00:39 2025 GMT
Subject: CN=4efcc4fb9365ae74c0d796100e2aa2c78f79718b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:ae:03:a6:c5:51:44:d3:10:d9:cf:fb:49:
be:31:eb:b3:85:e7:e7:f7:b1:1f:b6:71:4c:5a:e9:
e6:06:06:51:2a:eb:20:80:0c:da:9d:31:30:7c:ea:
99:c7:19:86:8d:3c:12:ba:2b:b3:a7:ca:c2:26:53:
dd:c1:5f:c2:23:18:ba:39:9a:ce:14:3d:32:12:f2:
69:2c:d3:b6:34:29:a4:59:ce:51:63:b5:ec:73:a0:
da:9e:1c:3e:74:ef:de:26:93:56:0b:3f:11:89:51:
31:f1:bb:2e:21:d7:69:42:12:d1:02:e3:61:31:73:
fb:cb:8a:5a:0b:f9:45:11:29:b3:19:50:28:ea:ec:
13:ae:40:49:8c:9a:e8:1c:aa:34:b7:5c:26:8e:7b:
97:ef:e1:80:95:ec:d3:c6:28:d7:ea:da:ae:61:1a:
3c:e2:b3:71:fb:45:1e:47:61:3c:59:6d:a2:96:4a:
b1:e3:2e:16:74:ae:ea:02:0f:b8:55:93:39:fe:f0:
6c:ee:d2:59:05:4f:1f:16:51:1a:dc:ca:9c:5e:80:
49:cb:3b:e8:3b:24:c2:7e:19:79:8b:b8:52:66:6c:
c6:d8:4f:e2:10:d4:f9:90:fc:43:4c:61:37:ad:4a:
1b:27:d2:d2:3b:34:f0:c1:2a:88:fd:75:c4:24:9f:
48:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FC:C4:FB:93:65:AE:74:C0:D7:96:10:0E:2A:A2:C7:8F:79:71:8B
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d1:b9:39:2b:ef:55:68:42:b5:a1:a4:77:7b:9f:10:f2:ba:
a8:7c:ec:33:8c:98:e6:16:ca:93:59:25:bc:42:53:37:b2:49:
ac:90:b8:aa:10:35:69:69:bb:71:08:01:37:60:c6:f6:c4:8a:
58:31:a9:28:9e:82:cd:15:98:ca:10:9b:60:8f:94:ae:ef:66:
ce:48:34:df:e3:54:f5:67:44:4c:fa:36:55:37:67:06:1c:c7:
36:0b:26:24:0b:ac:5b:26:91:72:85:53:74:09:9f:8c:c5:f9:
5e:89:88:68:bc:63:cc:01:11:42:40:a5:f0:2d:7a:0a:b3:11:
43:cf:72:0b:30:18:55:fc:3c:6c:ac:78:8b:e3:c5:f4:51:56:
3e:e4:ac:9a:6f:d1:89:0a:7d:38:97:5e:3e:ff:0b:ae:01:1e:
0f:fd:8d:7f:1d:23:9b:ba:aa:a3:73:b0:27:c5:84:ee:ec:bd:
41:06:91:6a:a3:a1:f9:99:fd:ab:39:3a:0f:d6:af:54:8c:55:
9d:86:6e:08:d1:83:d0:11:24:ec:9c:13:21:13:e5:ca:9e:56:
de:a1:d2:ef:09:64:f4:4e:8d:e0:d1:bb:09:ea:11:b3:1e:43:
21:07:4a:4f:b1:91:74:98:39:54:52:7c:04:57:0b:f5:3c:ef:
a2:8e:da:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:33:40 2025 by rpki-client